Re: Milters and policy

2021-04-23 Thread Simon Wilson
Pypolicyd-spf then tags what has driven the result for later use: E.g. Apr  3 11:19:23 emp87 policyd-spf[1336326]: prepend Authentication-Results: mail.simonandkate.net; spf=pass (mailfrom) Apr  2 12:32:51 emp87 policyd-spf[1255235]: prepend Authentication-Results: mail.simonandkate.net; spf=p

Re: Milters and policy

2021-04-23 Thread Benny Pedersen
On 2021-04-23 11:44, Nick Tait wrote: On 3/04/21 3:14 pm, Simon Wilson wrote: Pypolicyd-spf then tags what has driven the result for later use: E.g. Apr  3 11:19:23 emp87 policyd-spf[1336326]: prepend Authentication-Results: mail.simonandkate.net; spf=pass (mailfrom) Apr  2 12:32:51 emp87 polic

Re: Milters and policy

2021-04-23 Thread Nick Tait
On 3/04/21 3:14 pm, Simon Wilson wrote: Pypolicyd-spf then tags what has driven the result for later use: E.g. Apr  3 11:19:23 emp87 policyd-spf[1336326]: prepend Authentication-Results: mail.simonandkate.net; spf=pass (mailfrom) Apr  2 12:32:51 emp87 policyd-spf[1255235]: prepend Authenticatio

Re: Milters and policy

2021-04-02 Thread Dan Mahoney (Gushi)
On Sat, 3 Apr 2021, Simon Wilson wrote: Please read CVE-2019-20790, and tell me you’ve found a way to tell PyPolicyd not to trust the SMTP HELO to generate a passing AR header. This is possibly off-topic for the Postfix list... maybe not. …with tongue in cheek, I’ll take all the discussion

Re: Milters and policy

2021-04-02 Thread Simon Wilson
Please read CVE-2019-20790, and tell me you’ve found a way to tell PyPolicyd not to trust the SMTP HELO to generate a passing AR header. This is possibly off-topic for the Postfix list... maybe not. …with tongue in cheek, I’ll take all the discussion about mail filtering over any about p

Re: Milters and policy

2021-04-01 Thread Dan Mahoney
Replied inline and snipped. Apologies if my mail.app gets this wrong. > On Apr 1, 2021, at 7:49 PM, Simon Wilson wrote: > > - Message from Dan Mahoney - > Date: Thu, 1 Apr 2021 16:19:05 -0700 > From: Dan Mahoney > Subject: Re: Milters and p

Re: Milters and policy

2021-04-01 Thread Simon Wilson
- Message from Dan Mahoney - Date: Thu, 1 Apr 2021 16:19:05 -0700 From: Dan Mahoney Subject: Re: Milters and policy To: si...@simonandkate.net Cc: postfix-users@postfix.org On Mar 31, 2021, at 18:23, Simon Wilson wrote:  ...if multiple milters are called are

Re: Milters and policy

2021-04-01 Thread Dan Mahoney
> On Mar 31, 2021, at 18:23, Simon Wilson wrote: > >  >> >>> ...if multiple milters are called are they run in order specified? >>> >>> smtpd_milters = inet:127.0.0.1:8891,inet:127.0.0.1:8893 >> >> yes >> >>> I.e. in the example above if OpenDMARC is to see and trust an >>> alre

Re: Milters and policy

2021-03-31 Thread Simon Wilson
...if multiple milters are called are they run in order specified? smtpd_milters = inet:127.0.0.1:8891,inet:127.0.0.1:8893 yes I.e. in the example above if OpenDMARC is to see and trust an already-run OpenDKIM Authentication-Results header is the order of specifying the milters impo

Re: Milters and policy

2021-03-31 Thread Benny Pedersen
On 2021-04-01 02:29, Simon Wilson wrote: ...if multiple milters are called are they run in order specified? smtpd_milters = inet:127.0.0.1:8891,inet:127.0.0.1:8893 yes I.e. in the example above if OpenDMARC is to see and trust an already-run OpenDKIM Authentication-Results header

Re: Milters and policy

2021-03-31 Thread Simon Wilson
Quick question please: Which does Postfix run first - a milter specified in smtpd_milters or a check_policy_service in smtpd_recipient_restrictions? milters is run after check policy service, to keep performance at top Thank you sir... I just found this too which helped: https://groups.goo

Re: Milters and policy

2021-03-31 Thread Simon Wilson
- Message from Benny Pedersen - Date: Thu, 01 Apr 2021 01:50:15 +0200 From: Benny Pedersen Subject: Re: Milters and policy To: postfix-users@postfix.org On 2021-04-01 01:43, Simon Wilson wrote: Quick question please: Which does Postfix run first - a milter specified

Re: Milters and policy

2021-03-31 Thread Benny Pedersen
On 2021-04-01 01:43, Simon Wilson wrote: Quick question please: Which does Postfix run first - a milter specified in smtpd_milters or a check_policy_service in smtpd_recipient_restrictions? milters is run after check policy service, to keep performance at top

Milters and policy

2021-03-31 Thread Simon Wilson
Quick question please: Which does Postfix run first - a milter specified in smtpd_milters or a check_policy_service in smtpd_recipient_restrictions? I.e.: #OpenDKIM smtpd_milters = inet:127.0.0.1:8891 ... smtpd_recipient_restrictions = ... # python-policyd-spf check_policy_